This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/HTOeRqbo-uCqsKGQOQLdzD96K5k.roa File: HTOeRqbo-uCqsKGQOQLdzD96K5k.roa (raw, json) Hash identifier: Sqk3QRGZ4aVW4Wn9fCXDlruQoK54DaVq5O5N7hqKzAc= Subject key identifier: 1D:33:9E:46:A6:E8:FA:E0:AA:B0:A1:90:39:02:DD:CC:3F:7A:2B:99 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B6E87F244D85C7A803E3512EAEE3 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/HTOeRqbo-uCqsKGQOQLdzD96K5k.roa Signing time: Fri 02 Jan 2026 16:20:31 +0000 ROA not before: Fri 02 Jan 2026 16:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 2a0b:b87:ffd1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b6:e8:7f:24:4d:85:c7:a8:03:e3:51:2e:ae:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d339e46a6e8fae0aab0a1903902ddcc3f7a2b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:08:e9:cb:33:9e:f4:b6:b3:d9:31:6c:1b: 38:e6:0a:2a:81:83:7a:05:67:95:73:09:8d:7f:1f: a3:6e:88:6e:99:0b:cb:43:43:21:cb:3c:1f:d4:9b: 47:8b:9b:11:28:03:80:4c:90:d6:b2:7d:fd:d8:ef: 91:91:dd:75:0f:03:fe:17:4f:10:5e:1b:98:7b:c6: e3:40:55:c9:8a:f5:4a:f4:e2:04:b9:c0:ef:e3:1a: a5:a1:8e:10:12:cd:15:b8:f1:d2:c0:f5:d4:6a:1f: fb:47:b2:1d:05:2f:4c:79:bd:9a:da:2b:3d:6b:c7: ef:63:0f:77:7b:4f:94:f6:cc:6f:e1:ca:95:0b:7d: 17:7f:43:c7:c9:08:0c:3d:47:37:6d:98:b9:98:bd: f9:d4:b8:6e:d3:da:26:34:f0:5a:6b:fc:47:0c:cc: 40:45:65:45:43:97:57:2c:2c:76:78:2e:ef:b7:b0: 0c:8d:7c:3e:e2:f2:1f:ff:5e:dc:76:20:7c:6f:8a: ae:fe:44:16:58:a9:b6:c6:a2:ce:47:59:4f:79:1a: 24:f5:ff:7c:15:a8:29:9c:d4:06:2f:ae:05:b3:c3: 7f:65:ec:26:db:b3:f7:b1:fa:0e:53:0b:a0:07:8e: b3:8b:70:51:b4:a8:e0:38:9c:af:37:41:67:b8:81: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:9E:46:A6:E8:FA:E0:AA:B0:A1:90:39:02:DD:CC:3F:7A:2B:99 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/HTOeRqbo-uCqsKGQOQLdzD96K5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffd1::/48 Signature Algorithm: sha256WithRSAEncryption c6:e4:38:cc:d9:9a:dc:2b:43:5d:e3:d4:0d:81:f3:56:c2:77: 03:fd:9e:87:08:93:f1:57:15:e4:e2:2f:24:f7:0f:bf:a6:b7: 40:da:3a:37:6f:36:fb:9f:78:2d:c1:3b:98:c2:2b:16:f4:ad: 91:e4:83:47:e2:71:8d:6a:2e:2b:88:03:61:4b:ed:a5:e9:28: 46:1a:a8:a9:3d:1c:b2:19:e6:58:ea:a1:2e:fd:f7:69:43:57: bb:79:51:8a:3e:44:42:af:3d:0a:7c:1d:12:34:77:bf:28:c4: 5a:78:90:f7:c7:87:bd:3e:b0:06:38:6b:41:88:ab:b6:6c:aa: f3:9a:d2:cd:30:19:74:0f:c3:e9:22:2e:43:6f:4f:0a:e9:12: c8:4a:e4:5c:3f:51:0c:11:0a:f8:d3:bf:a0:54:55:b5:db:70: 9a:f2:d2:dc:f2:28:6d:70:1a:fc:74:a1:03:8a:75:59:d3:11: 96:55:24:71:99:81:4a:b3:fc:b1:84:23:55:7f:8a:0a:ac:7c: 8f:2f:e6:52:e9:af:eb:c5:be:d9:07:94:1c:68:f4:f7:06:3a: f4:34:2f:ce:8b:cd:7e:9e:d0:73:d3:a4:b2:d2:f7:4e:35:39: dd:84:db:a4:f8:dd:19:1f:0c:f6:1d:20:7a:84:32:5f:2b:b7: 2e:36:74:16 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/grbofyRNhceoA+NRLq7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDMzOWU0NmE2ZThmYWUwYWFiMGExOTAzOTAyZGRjYzNmN2EyYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwsI6csznvS2s9kxbBs45goqgYN6 BWeVcwmNfx+jbohumQvLQ0Mhyzwf1JtHi5sRKAOATJDWsn392O+Rkd11DwP+F08Q XhuYe8bjQFXJivVK9OIEucDv4xqloY4QEs0VuPHSwPXUah/7R7IdBS9Meb2a2is9 a8fvYw93e0+U9sxv4cqVC30Xf0PHyQgMPUc3bZi5mL351Lhu09omNPBaa/xHDMxA RWVFQ5dXLCx2eC7vt7AMjXw+4vIf/17cdiB8b4qu/kQWWKm2xqLOR1lPeRok9f98 FagpnNQGL64Fs8N/Zewm27P3sfoOUwugB46zi3BRtKjgOJyvN0FnuIEQjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB0znkam6PrgqrChkDkC3cw/eiuZMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvSFRPZVJxYm8tdUNxc0tHUU9RTGR6RDk2SzVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//R MA0GCSqGSIb3DQEBCwUAA4IBAQDG5DjM2ZrcK0Nd49QNgfNWwncD/Z6HCJPxVxXk 4i8k9w+/prdA2jo3bzb7n3gtwTuYwisW9K2R5INH4nGNai4riANhS+2l6ShGGqip PRyyGeZY6qEu/fdpQ1e7eVGKPkRCrz0KfB0SNHe/KMRaeJD3x4e9PrAGOGtBiKu2 bKrzmtLNMBl0D8PpIi5Db08K6RLISuRcP1EMEQr407+gVFW123Ca8tLc8ihtcBr8 dKEDinVZ0xGWVSRxmYFKs/yxhCNVf4oKrHyPL+ZS6a/rxb7ZB5QcaPT3Bjr0NC/O i81+ntBz06Sy0vdONTndhNuk+N0ZHwz2HSB6hDJfK7cuNnQW -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:41 2026 by rpki-client